Make bound functions have poisoned .caller and .arguments.

src/v8natives.js

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 1502 matching lines @@
   return FunctionSourceString(this);
 }
 
 
 // ES5 15.3.4.5
 function FunctionBind(this_arg) { // Length is 1.
   if (!IS_SPEC_FUNCTION(this)) {
     throw new $TypeError('Bind must be called on a function');
   }
   var boundFunction = function () {
+    // Poison .arguments and .caller, but is otherwise not detectable.
+    "use strict";
     // This function must not use any object literals (Object, Array, RegExp),
     // since the literals-array is being used to store the bound data.
     if (%_IsConstructCall()) {
       return %NewObjectFromBound(boundFunction);
     }
     var bindings = %BoundFunctionGetBindings(boundFunction);
 
     var argc = %_ArgumentsLength();
     if (argc == 0) {
       return %Apply(bindings[0], bindings[1], bindings, 2, bindings.length - 2);
@@ skipping 69 matching lines @@
 
 function SetUpFunction() {
   %CheckIsBootstrapping();
   InstallFunctions($Function.prototype, DONT_ENUM, $Array(
     "bind", FunctionBind,
     "toString", FunctionToString
   ));
 }
 
 SetUpFunction();